Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File: K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier: DCb2Ij+gyojnSgYkN/ZDmKr61PF6kDGighmcG6fOQns=
Subject key identifier: 40:B7:9F:5B:89:8D:84:68:18:29:EA:A2:EE:6B:69:CA:C0:5E:54:5D
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 019D389BBC5DFA62C842EC332B4E0FE7FED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number: 189A
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: 3jD0YcizeH8Q1qV2NEPg7xq78Tc.roa (hash: 52GkghurYXZlBw/P3re6oL3xnNmHYgWQ/XfBpyrLrd0=)
2: Ecy3CFSnUwOKhmhjKk6r9oZmrgU.roa (hash: XtcTVzHETxkCw8mwBAqZHbUKLVnvKh4s/PETyzl7Dqc=)
3: H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa (hash: vA9KgFsuau17xYabkQq0t4vvihSWAC35OyURHBxCae8=)
4: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: qv1euRizEGyAcE1WLFgy7A7GXhuCW6g3SThocObNgPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bc:5d:fa:62:c8:42:ec:33:2b:4e:0f:e7:fe:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=40b79f5b898d84681829eaa2ee6b69cac05e545d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:4e:2c:62:5d:34:f2:3d:47:3f:23:bf:e6:
d4:02:7c:c5:49:f0:1b:e5:97:6b:e2:8c:dd:e6:f7:
4c:40:dd:45:19:18:d6:08:98:90:7e:ce:45:cc:38:
65:b3:8f:7f:c9:8f:22:08:c5:26:e7:9e:70:20:35:
8f:dc:17:e1:e7:30:22:a3:a6:87:c4:ce:12:44:1f:
05:83:0e:2b:40:a7:5d:4b:97:74:90:05:3f:01:81:
83:e3:1f:85:5a:94:1a:06:3d:f1:bd:9c:9c:fd:92:
88:f6:fe:62:68:79:01:13:42:ca:6e:a3:0c:08:72:
8a:8f:57:30:39:ca:f6:06:de:44:9a:8d:80:96:d4:
dc:98:15:60:17:70:e5:43:93:36:85:bd:1b:d3:e3:
9c:21:c9:1d:6e:ec:64:99:84:c7:fc:db:82:ab:01:
e3:d2:e5:6c:d0:9e:58:8e:2e:e3:05:e1:d7:92:b0:
65:87:78:32:f5:ff:5a:ae:92:f2:ac:69:6f:53:9f:
67:81:51:55:dd:72:59:f7:b8:f9:62:3e:1e:1c:48:
69:0c:b2:a5:65:0c:2d:52:47:de:1a:c8:82:a0:21:
c3:ac:c6:5a:b1:cb:e7:df:07:dc:9d:c1:74:78:7f:
f3:a3:6b:6a:dc:00:57:47:6b:85:6d:32:91:37:9c:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B7:9F:5B:89:8D:84:68:18:29:EA:A2:EE:6B:69:CA:C0:5E:54:5D
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fb:64:09:b4:8f:b5:83:5f:35:86:18:a5:df:90:ab:8f:cb:
85:92:43:ab:8a:b7:23:dc:59:f9:85:8e:d0:7b:0b:41:e5:c0:
e6:68:aa:f5:59:e5:9a:a8:a6:7b:9a:0b:67:2b:2a:1a:82:1f:
48:ef:c3:1d:ad:2f:a8:f5:6c:6e:ed:6c:c7:c1:e1:44:39:8a:
21:42:13:99:12:f6:82:4b:45:59:39:6a:23:c6:92:d1:0a:9c:
a0:3d:65:98:6c:14:2c:a7:ad:c0:e5:74:1f:1e:f8:10:35:9e:
55:b1:1e:f6:ae:13:c7:ea:6e:ef:14:f7:28:0a:cc:b5:80:3a:
30:21:3b:3e:b1:f9:d2:64:20:21:ed:db:93:e0:6b:7b:55:1e:
7b:59:8d:fa:9e:58:66:e4:bc:0a:c8:40:a2:2b:81:f3:01:8e:
af:95:c4:9b:7a:74:5f:ed:8f:ed:0c:0f:4b:21:d2:e7:eb:cc:
e8:55:46:15:7f:07:b4:83:67:ee:6b:a0:58:9a:ed:8c:4f:65:
b4:ff:17:8c:5f:bd:19:ce:76:8e:4b:c5:e2:c7:06:60:4f:b7:
61:85:1a:f7:12:99:a0:a8:c4:07:17:4d:73:23:02:d3:c6:cf:
a7:59:67:13:3d:32:16:9d:a0:8c:b8:34:ff:25:f7:04:0f:bb:
11:0b:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:10 2026 by rpki-client